[Snort-sigs] performance criteria

evilghost at ...3397... evilghost at ...3397...
Sun May 15 23:07:29 EDT 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This question was also posed in a different form, via thread hi-jacking, on
Emerging-Threats as well.  Obvious troll is obvious; do not respond.

Jules you need to work on your troll-craft and I'm willing to offer up some
after hour tutoring if you want to better hone your skills.

Here is your scoring breakdown for this attempt:

1) Subtle controversial topic; +10 points
2) Thread hi-jacking a proposed signature ET thread; -5 points.
3) Dual-posting to both Snort-Sigs and ET; -5 points
4) Poorly structured question; -5 points
5) Weakly structured veiled question to incite conflict; -5 points.

Total score: -5 points.  Feel free to follow up with me on tutoring.



On 05/15/11 08:20, Jules Pagna Disso wrote:
> hi,
> 
> I know this is not directly related to rules but I think you would be the
> best to help me with the criteria/parameters that need considering when
> evaluating and IDS performance or when comparing two IDS.
> 
> thanks,
> Jules

- -- 

- -evilghost
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=nzFt
-----END PGP SIGNATURE-----




More information about the Snort-sigs mailing list